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Abstract. We prove that Hilbert's Tenth Problem for a ring of in- 
tegers in a number field K has a negative answer if K satisfies two 
arithmetical conditions (existence of a so-called division-ample set of 
integers and of an elliptic curve of rank one over K) . We relate division- 
ample sets to arithmetic of abelian varieties. 

Introduction. 

Let be a number field and let 0k be its ring of integers. Hilbert's 
Tenth Problem or the diophantine problem for 0k is the following: is there 
an algorithm (on a Turing machine) that decides whether an arbitary dio- 
phantine equation with coefficients in 0k has a solution in 0k- 

The answer to this problem is known to be negative if K = Q ([S])) 
and for several other such K (such as imaginary quadratic number fields 0, 
totally real fields ^Tj, abelian number fields by reduction to the case 
K = Q. This reduction consists in finding a diophantine model (cf. [2]) for 
integer arithmetic over 0k- The problem is open for general number fields 
(for a survey see [H] and ^2j), but has been solved conditionally, e.g. by 
Poonen (who shows that the set if rational integers is diophantine over 
0K if there exists an elliptic curve over Q that has rank one over both Q 
and K). In this paper, we give a more general condition as follows: 

Theorem. The diophantine problem for the ring of integers 0k of a 
number field K has a negative answer if the following exist: 
(i) an elliptic curve defined over K of rank one over K; 
(a) a division-ample set A C 0k - 
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A set A C 0x is called division-ample if the following three conditions are 
satisfied: 

o (diophantineness) A is a diophantine subset of 0k', 
o (divisibility-density) Any x S 0k divides an element of A; 
o (norm-boundedness) There exists an integer i > 0, such that for any 
a ^ A, there is an integer a G Z with a dividing a and |A^(a)| < \a\^. 

Proposition. A division ample set exists if either 
(i) there exists an abelian variety G over Q such that 

rkG(Q) =rkG(i^) > 0; or 

(a) there exists a commutative (not necessarily complete) group variety 
G over Z such that G{0k) is finitely generated and such that rkG(Q) = 
rkG(i^) > 0. 

Prom (i) in this proposition, it follows that our theorem includes that 
of Poonen, but it isolates the notion of "division-ampleness" and shows it 
can be satisfied in a broader context. It would for example be interesting to 
construct, for a given number field K, a curve over Q such that it's Jacobian 
satisfies this condition. 

As we will prove below, part (ii) of this proposition is satisfied for the 
relative norm one torus G = ker{N^^) for a number field L linearly disjoint 
from K, if K is quadratic imaginary (choosing L totally real). 

It would be interesting to know other division-ample sets, in particular, 
such that are not subsets of the integers. 

The proof of the main theorem will use divisibility on elliptic curves 
and a lemma from algebraic number theory of Denef and Lipshitz. Some of 
our arguments are similar to ones in jlUj . but we have avoided continuous 
reference both for reasons of completeness and because our results have been 
obtained independently. 

1. Lemmas on number fields 

In this section we collect a few facts about general number fields which 
will play a role in subsequent proofs. Fix to be a number field, let = 0k 
be its ring of integers, and let h denote the class number of 0. Let = Nq 
be the norm from K to Q, and let n = [K : Q] denote the degree of K. Let 
I denote "divides" in 0. 

First of all, we will say a subset S C K"^ is "diophantine over 0" if its 
set of representatives 5" C (0 x (0 — {0}))" given by 

S := {{a,,h)7=i G (0 X (0 - {0}))" | (aM^ e S} 

is diophantine over 0. Recall that "x ^ 0" is diophantine over ([H] Prop. 
1(b)), hence S is diophantine over if and only if it is diophantine over K. 
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Recall that there is no unique factorisation in general number fields, but 
we can use the following valuation-theoretic remedy: 

1.1 Definition. Let x e K. If = f for a, 6 G with (a, b) = I (the 
ideal generated by a and 6), we say that a = wn(x) is a weak numerator and 
h = wd(3;) is a weak denominator for x. 

1.2 Lemma, (i) For any x € K a weak numerator and a weak denom- 
inator exists and is unique up to units. 

(a) for any valuation, v{x) > <^=^ v{wn{x)) > [and then v{wn{x)) = 
hv{x)], and v{x) < <;=^ v{wd{x)) > [and then v{wd{x)) = —hv{x)j. 

(Hi) For a G 0,x £ K, "a = wn(3;)" and "a = wd(x)" are diophantine 
over 0. 

Proof. Since is a Dedekind ring, (x) has a unique factorisation in 
fractional ideals 

(x) =pi---Pr-q^^---q7^ 

We let a be a generator for the principal ideal (pi • • • pr)^ and b a genera- 
tor for (qi • • • c\s)^', these are obviously weak numerator /denominator for x. 
Uniqueness, (ii) and (iii) are obvious. □ 

1.3 Lemma. (Denef-Lipshitz |H]) 

(i) IfuG Z — {0} and ^ G satisfy the divisibility condition 

n!-l 

2-!+l + i)-! I u 

1=0 

then for any embedding a : K ^ C 

(*). wm<li/mu)\. 

(a) If u £ Z — {0},q G Z and ^ G satisfy {*)u for any embedding 
a : K ^ C and ^ = qmodu, then ^ G Z. 

Proof. Easy to extract from the proof of Lemma 1 in jSj . □ 
2. Lemmas on elliptic curves 

Let E denote an elliptic curve of rank one over K, written in Weierstrass 
form as 

E : y'^ + aixy + asy = x^ + a2x'^ + a^x + qq, 

let T be the order of the torsion group of E{K), and let P be a generator 
for the free part of E{K). Define Xn, yn ^ K hy nP = {xn,yn)- 

2.1 Lemma. For any integer r the set rE[K) is diophantine over K 
and, ifr is divisible byT, then rE{K) = {rP) = (Z,+). 

Proof. A point {x,y) G K x K belongs to rE{K) — {0} if and only if 
3 {xo,yo) G E{K) : {x,y) = r{xQ,yQ). As the addition formute on E are 
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algebraic with coefficients from K, this is a diophantine relation. The last 
statement is obvious. □ 



2.2 Lemma. There exists an integer r > such that for any non-zero 
integers m,n £ Z, m divides n if and only if wd(xrm)| wd(xrn)- 

Proof. We reduce the claim to a statement about valuations using lemma 
11.2( 11). The theory of the formal group associated to E implies that if n = mt 
and is a finite valuation of K such that v{xrm) < 0, then v{xrmt) = 

v{Xrm) - 2v{t) < v{Xrm) VII.2.2). 

For the converse, we start by choosing ro in such a way that r^P is 
non-singular modulo all valuations v on K. By the theorem of Kodaira- 
Neron (^13 , VII. 6.1), such ro exists and it actually suffices to take tq = 
4Y\^v{Ae), where A^; is the minimal discriminant of E, and the product 
runs over all finite valuations on K for which v{Ae) ^ 0. Note that then, 
v{xron) < <^=^> ronP = in the group E^j of non-singular points of E 
modulo V. 

We claim that for an arbitrary finite valuation v on K , if v^Xr^n 
and ^(xrom) < 0, then v{x(^rom,ron)) < 0) where (•, •) denotes the gcd in Z. 
Indeed, the hypothesis means romP = r^nP = in E^. Since there exist 
integers o, 6 G Z with (rom, rgn) = argm + bron, we find (rom, rQn)P = in 

and hence the claim. 

The main theorem of [T] states that for any sufficiently large M(> Mq), 
there exists a finite valuation v such that v{xm) < but v{xi) > for 
all i < M. We choose r = voMq. Pick such a valuation v for M = rm. 
The hypothesis implies that v{xrn) < and hence v{xr(^m.n)) < 0- But 
r{m,n) < rm and v{xi) > for any i < rm. Hence r{m,n) = rm so m 
divides n. □ 

2.3 Lemma. Any ^ G — {0} divides the weak denominator of some 

X fi . 

Proof. Let f be a valuation lying over the prime of Z, and assume 
that w(^) = > 0. Then the group of non-singular points on E modulo 
V is finite, hence there exists an such that n^rP = in this group, i.e., 
v{xnyr) < 0. By the formal group law formula, we see that v{Xpev^^^) = 
v{xn^r) - '^v{pI'') < -Cy. Putting 

n = r • n^pl" 
f(C)>o 

will then certainly suffice. □ 

2.4 Lemma. Let m, n, q be integers with n = mq. Then 

wd{xm)\ wn( ^"^"' - q). 
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Proof. The formal power series expansion for addition on E around 
([IS], IV. 2. 3) implies that ^ = + from which the result 

follows. □ 



3. Proof of the main theorem 

Let ^ G 0. Given an elliptic curve E of rank one over K as in the main 
theorem, we use the notation from section [21 for this E — in particular, 
choose a suitable r such that lemma 12.21 applies; we also choose i which 
comes with the definition of A. We claim that the following formula give a 
diophantine definition of Z in 0: 



3 m, n G rTZ, 3 u £ A-{0} < 



(1) m\n 

(2) 2"'+i"n\^^"' 

i=0 

(3) u^\wd{xm) 



(4) wd(xm)|wn( 



u 







3.1 Any C ^ Z satisfies the relations. If ^ G Z, then a u satisfying 
(2) exists because A is division-dense. By lemma 12.31 there exists an m 
satisfying (3) for this u. Define n = for this m. Then (1) is automatic 
and (4) is the contents of lemma 12.41 

3.2 A ^ satisfying the relations is integral. Let g G Z satisfy 
n = qm (which exists by (1)). Then lemma [231 implies that 

wd{xm)\ wn( ^"^"' - q), 

^mUn 

which can be combined with (4) using the non-archimedean triangle inequal- 
ity to give 

wd{xm)\wn{(-q) = iC-qf. 

By (3), then also — q. 

By norm-boundedness of j4 we can find -u G Z such that u\u and |-/V('u)| < 
u^. We still have 

(*) ^ = qmodu; u,q£Z. 

Condition (2) implies that Lemma ll.3f i) can be applied with in place 
of so for any complex embedding o" of IT we find 

(**) \cr{S.)\ <^\N{u)\'i^ <^N{u)^ . 

Because of (*) and (**), we can apply Lemma lOT ii) to conclude G Z. 

3.3 The relations (l)-(4) are diophantine over 0. Bv 11.21 and 

12.11 for a G 0, the relations 3n G rTZ : a = wn(x„) and 3n G rTZ : 
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a = wd(x„) are diophantine. By the diophantineness of A, the membership 
u £ A is diophantine, and n 7^ is diophantine (0, Prop. 1(b)). Condition 
(1) is diophantine because of Lemma 12.21 Conditions (2)-(4) are obviously 
diophantine using [TT^ □ 

4. Proof of the proposition and discussion of division-ample 
sets 

4.1 Rank-preservation over Q. We use [3] as a general reference on 
abelian varieties and formal groups. Suppose there exists an abelian variety 
G of dimension d over Q such that rkG(Q) = ikG{K) > (note that 
G{K) is finitely generated by the Mordell-Weil theorem). Let T denote the 
(finite) order of the torsion of G{K) and consider the free group TG{K) = 
. The assumption implies that G(Q) is of finite index \G{K^ : G(Q)] in 
G{K). The choice of an ample line bundle on G gives rise to a projective 
embedding of G in some projective space with coordinates (x,)^^, where G 
is cut out by finitely many polynomial equations and the addition on G is 
algebraic in those coordinates. Suppose {tj} are algebraic function of the 
coordinates, and local uniformizers at the unit = (1 : : . . . : 0) of G (i.e., 
0G,o = Q[[ii, ■ ■ -^td]]), and define 

N 

Ag := {wdiHuiP)) : P G T[G{K) : G(Q)] • G{K) and ti{P) = 1}. 

1=2 

We claim that Aq is division-ample. Indeed, the three conditions are satis- 
fied: 

(a) Ag is obviously diophantine over (the diophantine definition comes 
from the chosen embedding of G). 

(b) The analogue of lemma [THl remains valid: 
Claim. Ag is divisibility-dense. 

Proof. Since any £ — {0} divides its norm, it suffice to prove that 
any integer z G Z — {0} divides an element of Ag. Given a minimal model 

for G over a p-adic field Qp, let denote the group of points whose 
reduction is non-singular modulo p. Then S^p^o is a clopen subset of '^p, so 
^pMpf) is finite (and non-trivial only for the finite set of primes for which 
^p has bad reduction). Hence we can choose a finite r so large that rPj is 
non-singular modulo all primes for all generators Pi of G(Q). Pick a prime 
p\z^ then since the group of non-singular points on G modulo p is finite, 
there exists Up such that UpvP = in this group, i.e., Vp(ti{P)) > for all i. 
The formal group Go of G around (defined by the power series that give 
the addition in terms of {t?,}) is a formal torus in characteristic zero, and 
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hence admits for any > a formal logarithmic isomorphism to a power 
of the additive group 

,^:G'o(p^Zp)-Gf(p^Zp) 

preserving valuations. Hence for any n, 

viU{nP)) = vmi{nP))) = v{n{<l,{ti{P))) = v{n) + v{<l){ti{P)) 
= v{n) + v{ti{P)), 

and we can find n such that v{ti{P)) becomes arbitrary large as in 12.31 □ 

(c) Since by assumption, all elements of Aq are in Z, we can set a = a, 
i = n for any a G Aq to get the required norm-boundedness. 

Remarks, (i) From available computer algebra, the construction of 
elliptic curves which fit the above can be automated. One can compute 
ranks of elliptic curves over Q quite fast using mwrank by J. Cremona j^, 
and over number fields using the gp-package of D. Simon PIC). One finds 
for example unconditionally that the curve = + 8x has rank one over 
Q and this rank stays the same over Q(-v^), Q(v^), hence the diophantine 
problem for the integers in these number fields has a negative answer (note 
that their Galois closures are non-abelian). 

(ii) We ask: given K, can one construct in some clever way a curve C 
over Q such that its Jacobian satisfies the above conditions? 

4.2 Rank-preservation over Z. A similar construction (of which we 
leave out the details) can be performed if there exists a commutative (not 
necessarily complete) group variety G over Z such that G(0) is finitely 
generated and such that rkG(Z) = rkG(0) > 0. As an example of this, 
let L be another number field, linearly disjoint from K. Let (oj) denote a 
Z-basis for L/Q (this is also a basis for 0k L over 0k)- Let denote the 
norm one torus Nq{Y1 O'i^i) = 1- Then Ti(Z) = 0*^ and 

ri(0;^)=ker(iVf^:0|,i^0|,), 

hence (by surjectivity of the relative norm) rkT/;,(0/^) = rk0^^ — rk0|^. 
In particular, TLi0K) = 7l(Z) iff 

TKL + SKL = rK + SK + rL + SL-l 

where vmiSm denote the number of real, respectively half the number of 
complex embeddings of a number field M. 

(a) If K is totally real of degree d, tkl = dri^SKL = ds^, hence we 
want rL + sl = 1, which we can achieve by choosing L quadratic imaginary; 
but then Tl(Z) is of rank zero. 



7 



(b) If K is totally complex of degree d, rx = ^,sk = 2- Also KL is 
then totally complex, so rxL = ^^skl = ^[L ■ Q], hence we want ^{[L : 
Q] — 1) = vl + sl — 1, but since the right hand side is less than or equal to 
[L : Q] — 1, we find d < 2. Hence this strategy only works for K quadratic 
imaginary. 

The conclusion is that this approach covers Denef's result from ex- 
cept that he can discard the first condition in our theorem (existence of 
elliptic curve of rank one) by using a torus instead. 

Remark. In all these examples, division-ample sets are actually subsets 
of the integers. Can one find a division-ample set which does not consists of 
just ordinary integers? 
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